Microsoft Addresses 622 Vulnerabilities, Two Critical Zero-Days Exploited in the Wild

Microsoft released a record 622 security patches, including two zero-day vulnerabilities actively exploited in attacks. The update also completes Kerberos RC4 hardening, requiring immediate administrative action to prevent authentication failures.

Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 200.

Those two live bugs are the ones to grab first. Microsoft credits incident responders for both. Both are

Read original article